Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/AkS8B-J1j8n89px43pR7hDex3sA.roa
File:                     AkS8B-J1j8n89px43pR7hDex3sA.roa (raw, json)
Hash identifier:          Pp8E90VKaBzyCW9A8Cisj8W4WyV2wGUVVee4C8hP8us=
Subject key identifier:   02:44:BC:07:E2:75:8F:C9:FC:F6:9C:78:DE:94:7B:84:37:B1:DE:C0
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       01867FF91C302AF79A25AAAC96DD1B26F341
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/AkS8B-J1j8n89px43pR7hDex3sA.roa
Signing time:             Thu 23 Feb 2023 20:31:17 +0000
ROA not before:           Thu 23 Feb 2023 20:31:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199765
IP address blocks:        185.179.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 20 Oct 2023 08:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7f:f9:1c:30:2a:f7:9a:25:aa:ac:96:dd:1b:26:f3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Feb 23 20:31:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0244bc07e2758fc9fcf69c78de947b8437b1dec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:ac:f2:05:c7:67:b0:01:7f:68:d0:73:58:
                    1e:18:fa:72:9e:4f:f2:25:59:91:6c:26:54:61:a5:
                    51:7b:cc:02:7a:51:38:d1:eb:bc:b6:06:4e:d4:1f:
                    63:d8:27:05:bb:bb:7c:50:9b:06:77:b7:30:3b:ac:
                    8f:e0:89:98:a6:28:ff:c0:9d:83:b9:a8:19:e5:93:
                    0a:ed:5b:f4:9c:7e:c3:29:29:93:ff:56:8e:59:46:
                    58:79:78:42:1c:9c:8a:c0:f5:c6:16:a8:cb:05:b5:
                    30:ba:bc:d2:57:7a:db:9e:cb:1c:f7:79:e2:13:98:
                    50:6c:2f:81:fa:78:e9:06:ff:4e:12:45:fd:60:d7:
                    5c:0a:ea:27:81:7a:74:f0:0a:b4:34:39:ed:ab:ca:
                    32:47:41:13:47:8a:ad:11:cf:b2:0a:98:96:b0:82:
                    07:43:9b:45:01:19:38:15:80:0b:d5:2f:0f:5e:20:
                    52:0b:dc:00:42:01:de:96:8c:e7:8f:40:e7:e5:c7:
                    c3:e1:6d:61:04:aa:6f:f5:2a:24:9d:8e:3c:25:8b:
                    2c:1c:bf:a9:de:1d:19:c7:f0:86:60:bd:74:aa:14:
                    29:e1:fd:cd:9a:25:17:1e:50:ac:fc:0e:06:ef:66:
                    72:2a:e9:9d:15:4f:17:8c:01:e2:cf:e4:ec:82:a1:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:44:BC:07:E2:75:8F:C9:FC:F6:9C:78:DE:94:7B:84:37:B1:DE:C0
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/AkS8B-J1j8n89px43pR7hDex3sA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:61:e2:83:c4:75:75:e6:6e:91:9f:f3:c8:0b:4b:b7:cc:
         3f:83:64:5a:da:73:8b:0a:95:20:1b:d5:6e:be:ef:fc:a7:4f:
         18:06:ac:36:50:24:f8:0a:0a:a6:5a:69:f0:7f:7f:e1:ec:92:
         18:89:f4:94:28:1f:d4:8c:c4:f8:2f:8d:04:d5:27:3f:05:85:
         a2:87:8e:e8:ae:61:c9:93:b8:ca:09:30:43:cf:70:83:68:f3:
         a7:74:3a:ad:34:83:79:ed:89:2e:d3:62:1f:d1:99:9d:76:02:
         4b:32:ec:2d:eb:b7:33:3c:bb:ae:28:e9:97:98:a1:b6:13:d2:
         35:1b:d0:29:50:0b:ee:f3:94:3a:04:05:5c:8a:7a:bc:db:25:
         9f:9a:73:fd:63:07:75:45:44:ca:13:23:83:12:2a:56:79:fd:
         e2:6d:11:76:31:74:8e:91:91:bf:cf:35:c0:fa:40:48:5a:7c:
         37:51:aa:bb:2b:c0:0d:83:e8:8a:44:1a:9b:70:a2:84:7d:48:
         d0:1a:7a:46:43:3d:c7:44:a6:d2:ef:72:a5:06:b3:8b:72:14:
         45:87:f1:7a:42:8e:db:08:03:21:d7:a7:0f:6b:e9:06:34:f5:
         e4:c4:78:0b:60:1d:92:89:da:6b:6c:63:e5:c0:19:4c:16:fb:
         b6:4d:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org